![](/static/253f0d9b/assets/icons/icon-96x96.png)
I had to look up Blinding Lights, and I don’t recognize it. I know the others from that list (whether they fit the criteria or not).
I had to look up Blinding Lights, and I don’t recognize it. I know the others from that list (whether they fit the criteria or not).
My apologies. I felt a little like you were agreeing with the previous commenter (“no nefarious software”) when you were talking about Autopilot, and I thought it worth pointing out that your employer certainly can install “nefarious” things even if they didn’t directly provision the device for you.
Of course I know that a lot of work still goes into setting up Intune so that your Autopilot devices are fit for use!
Receiving a Windows Autopilot device direct from the manufacturer or vendor in no way prevents your employer from installing whatever software they want on the device, of course. I can’t speak for the Apple device but I would imagine there are ways to remotely manage the device even there - requiring the employee to sign in to Jamf, perhaps.
Authentication methods in Entra ID (which is presumably what we are talking about as the identity provider) include Microsoft Authenticator and software otp.
Authenticator is push authentication, as described elsewhere here. If for some reason you’re not getting push notifications, you can use an OTP code instead, but this still requires that you have push authentication configured in Microsoft Authenticator.
You can only use Software OTP in other applications if your administrator has explicitly allowed use of Software OTP as an authentication method, and also excluded you from being required to use Authenticatior - otherwise Authenticatior would always ‘win’ as choice of mechanisms because it is more secure.
Several states in the USA require that employees who are made to use their personal phone for business purposes be compensated. The enforcement method and process for requesting same is naturally very obscure.